github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

[GH-ISSUE #2110] Tor Browser stopped working with firejail after a major update #1428

New issue
Closed
opened 2026-05-05 08:05:35 -06:00 by gitea-mirror · 21 comments
gitea-mirror commented 2026-05-05 08:05:35 -06:00
Owner
Copy link

Originally created by @ghost on GitHub (Sep 7, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2110

I am using firejail-0.9.54 on Slackware64 Linux-14.2 and today Tor Browser updated itself from version 7.5.6 to version 8.0. After this Tor Browser doesn't work anymore when launched through firejail. Once the main window starts, it displays the message:

Gah. Your tab just crashed.

Same happens for any new opened tab. It works fine without firejail.

Originally created by @ghost on GitHub (Sep 7, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2110 I am using firejail-0.9.54 on Slackware64 Linux-14.2 and today Tor Browser updated itself from version 7.5.6 to version 8.0. After this Tor Browser doesn't work anymore when launched through firejail. Once the main window starts, it displays the message: Gah. Your tab just crashed. Same happens for any new opened tab. It works fine without firejail.
gitea-mirror 2026-05-05 08:05:35 -06:00
gitea-mirror commented 2026-05-05 08:05:38 -06:00
Author
Owner
Copy link

@smitsohu commented on GitHub (Sep 7, 2018):

Hi @somospocos, we believe this is already fixed for upcoming 0.9.56.

See defb5a4891 and 736216cacf

General question: Should this go to etc-fixes?

<!-- gh-comment-id:419405642 --> @smitsohu commented on GitHub (Sep 7, 2018): Hi @somospocos, we believe this is already fixed for upcoming 0.9.56. See defb5a48918c9fda82ac9bcf5c8a301e5f60da23 and 736216cacfe6a818b1ea0255f474089a8fa2f394 General question: Should this go to etc-fixes?
gitea-mirror commented 2026-05-05 08:05:39 -06:00
Author
Owner
Copy link

@Nurmagoz commented on GitHub (Sep 8, 2018):

This has been reported against TorProject and FF. because it effects both of them and tested by me:

FF 60:

https://bugzilla.mozilla.org/show_bug.cgi?id=1488078

TBB 8.0:

https://trac.torproject.org/projects/tor/ticket/27407#ticket

<!-- gh-comment-id:419640580 --> @Nurmagoz commented on GitHub (Sep 8, 2018): This has been reported against TorProject and FF. because it effects both of them and tested by me: FF 60: https://bugzilla.mozilla.org/show_bug.cgi?id=1488078 TBB 8.0: https://trac.torproject.org/projects/tor/ticket/27407#ticket
gitea-mirror commented 2026-05-05 08:05:39 -06:00
Author
Owner
Copy link

@SkewedZeppelin commented on GitHub (Sep 8, 2018):

@TNTBOMBOM
This is not something that upstream Mozilla can/will fix, this is purely an issue with our profiles.

This issue that has been fixed since 0.9.54 for Firefox and derivatives
and is fixed for Tor Browser in master (future 0.9.56).

What version of Firejail are you running?

<!-- gh-comment-id:419642324 --> @SkewedZeppelin commented on GitHub (Sep 8, 2018): @TNTBOMBOM This is not something that upstream Mozilla can/will fix, this is purely an issue with our profiles. This issue that has been fixed since 0.9.54 for Firefox and derivatives and is fixed for Tor Browser in master (future 0.9.56). What version of Firejail are you running?
gitea-mirror commented 2026-05-05 08:05:40 -06:00
Author
Owner
Copy link

@Nurmagoz commented on GitHub (Sep 8, 2018):

@SkewedZeppelin 0.9.44.8 from debian stretch stable repo. if firejail have been fixing that why dont u push the changes to Debian Repo ??

<!-- gh-comment-id:419642891 --> @Nurmagoz commented on GitHub (Sep 8, 2018): @SkewedZeppelin 0.9.44.8 from debian stretch stable repo. if firejail have been fixing that why dont u push the changes to Debian Repo ??
gitea-mirror commented 2026-05-05 08:05:41 -06:00
Author
Owner
Copy link

@SkewedZeppelin commented on GitHub (Sep 8, 2018):

@TNTBOMBOM 0.9.54 is available via stretch-backports

<!-- gh-comment-id:419643077 --> @SkewedZeppelin commented on GitHub (Sep 8, 2018): @TNTBOMBOM 0.9.54 is available via stretch-backports
gitea-mirror commented 2026-05-05 08:05:42 -06:00
Author
Owner
Copy link

@Nurmagoz commented on GitHub (Sep 8, 2018):

@SkewedZeppelin saw that , still bad if its a stable version then its better to be pushed for the stable repo.

<!-- gh-comment-id:419643224 --> @Nurmagoz commented on GitHub (Sep 8, 2018): @SkewedZeppelin saw that , still bad if its a stable version then its better to be pushed for the stable repo.
gitea-mirror commented 2026-05-05 08:05:42 -06:00
Author
Owner
Copy link

@Vincent43 commented on GitHub (Sep 8, 2018):

That's not how Debian stable works. They take the last stable firejail version at the point of Debian release and stick with it forever. If you want to have firejail gradually updated to latest version then use backports, testing, unstable or different distro.

Security updates are exception, that's why they keep updating chromium and firefox esr.

<!-- gh-comment-id:419662544 --> @Vincent43 commented on GitHub (Sep 8, 2018): That's not how Debian stable works. They take the last stable firejail version at the point of Debian release and stick with it forever. If you want to have firejail gradually updated to latest version then use backports, testing, unstable or different distro. Security updates are exception, that's why they keep updating chromium and firefox esr.
gitea-mirror commented 2026-05-05 08:05:43 -06:00
Author
Owner
Copy link

@Nurmagoz commented on GitHub (Sep 10, 2018):

@SkewedZeppelin @Vincent43 thats great it worked fine with FF , but sadly it break TBB. any idea how to overcome that?

<!-- gh-comment-id:419779137 --> @Nurmagoz commented on GitHub (Sep 10, 2018): @SkewedZeppelin @Vincent43 thats great it worked fine with FF , but sadly it break TBB. any idea how to overcome that?
gitea-mirror commented 2026-05-05 08:05:44 -06:00
Author
Owner
Copy link

@Vincent43 commented on GitHub (Sep 10, 2018):

Fixes for tor browser aren't part of 0.9.54, they will be in 0.9.56. For now you may copy profiles manually:
https://github.com/netblue30/firejail/blob/master/etc/start-tor-browser.profile
https://github.com/netblue30/firejail/blob/master/etc/torbrowser-launcher.profile

<!-- gh-comment-id:419912245 --> @Vincent43 commented on GitHub (Sep 10, 2018): Fixes for tor browser aren't part of 0.9.54, they will be in 0.9.56. For now you may copy profiles manually: https://github.com/netblue30/firejail/blob/master/etc/start-tor-browser.profile https://github.com/netblue30/firejail/blob/master/etc/torbrowser-launcher.profile
gitea-mirror commented 2026-05-05 08:05:44 -06:00
Author
Owner
Copy link

@HundyK commented on GitHub (Sep 12, 2018):

Is the Tor fix part of 0.9.56~rc1?

I am running into the same problem with the tabs crashing on startup using 0.9.56~rc1.

<!-- gh-comment-id:420746248 --> @HundyK commented on GitHub (Sep 12, 2018): Is the Tor fix part of 0.9.56~rc1? I am running into the same problem with the tabs crashing on startup using 0.9.56~rc1.
gitea-mirror commented 2026-05-05 08:05:44 -06:00
Author
Owner
Copy link

@SkewedZeppelin commented on GitHub (Sep 12, 2018):

@HundyK the fix for TBB is not in 0.9.56rc1, only master (future 0.9.56 release).

<!-- gh-comment-id:420746717 --> @SkewedZeppelin commented on GitHub (Sep 12, 2018): @HundyK the fix for TBB is not in 0.9.56rc1, only master (future 0.9.56 release).
gitea-mirror commented 2026-05-05 08:05:45 -06:00
Author
Owner
Copy link

@chiraag-nataraj commented on GitHub (Sep 25, 2018):

Which has now been released! Closing this for now, but please feel free to reopen if you still have this issue after upgrading.

<!-- gh-comment-id:424378026 --> @chiraag-nataraj commented on GitHub (Sep 25, 2018): Which has now been released! Closing this for now, but please feel free to reopen if you still have this issue after upgrading.
gitea-mirror commented 2026-05-05 08:05:45 -06:00
Author
Owner
Copy link

@Nurmagoz commented on GitHub (Oct 2, 2018):

after adding profiles to /etc/firejail/torbrowser-launcher as copy/paste from this link:
https://github.com/netblue30/firejail/blob/master/etc/torbrowser-launcher.profile

result after that, by running firejail torbrowser-laucher will give:

user@debian:~$ firejail torbrowser-launcher 
Reading profile /etc/firejail/torbrowser-launcher.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Error: cannot access profile file
user@debian:~$

@chiraag-nataraj please re-open this ticket

<!-- gh-comment-id:426333877 --> @Nurmagoz commented on GitHub (Oct 2, 2018): after adding profiles to /etc/firejail/torbrowser-launcher as copy/paste from this link: https://github.com/netblue30/firejail/blob/master/etc/torbrowser-launcher.profile result after that, by running `firejail torbrowser-laucher` will give: ``` user@debian:~$ firejail torbrowser-launcher Reading profile /etc/firejail/torbrowser-launcher.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Error: cannot access profile file user@debian:~$ ``` @chiraag-nataraj please re-open this ticket
gitea-mirror commented 2026-05-05 08:05:46 -06:00
Author
Owner
Copy link

@Fred-Barclay commented on GitHub (Oct 2, 2018):

@TNTBOMBOM What version of firejail are you using?
Can you also please run the following and paste the output back here?
firejail --debug torbrowser-launcher

Thanks!

EDIT: I expect you're using an older version of firejail that doesn't have /etc/firejail/disable-xdg.inc, but the profile you copied expects it. 😉 . If so, simply removing the line include /etc/firejail/disable-xdg.inc from your profile should fix this.

<!-- gh-comment-id:426465445 --> @Fred-Barclay commented on GitHub (Oct 2, 2018): @TNTBOMBOM What version of firejail are you using? Can you also please run the following and paste the output back here? `firejail --debug torbrowser-launcher` Thanks! EDIT: I expect you're using an older version of firejail that doesn't have `/etc/firejail/disable-xdg.inc`, but the profile you copied expects it. :wink: . If so, simply removing the line `include /etc/firejail/disable-xdg.inc` from your profile should fix this.
gitea-mirror commented 2026-05-05 08:05:46 -06:00
Author
Owner
Copy link

@Nurmagoz commented on GitHub (Oct 3, 2018):

@Fred-Barclay

Big Thanks!!!

<!-- gh-comment-id:426690658 --> @Nurmagoz commented on GitHub (Oct 3, 2018): @Fred-Barclay Big Thanks!!!
gitea-mirror commented 2026-05-05 08:05:47 -06:00
Author
Owner
Copy link

@Zypherspace commented on GitHub (Nov 23, 2018):

Same problem here as TNTBOMBOM

firejail --debug torbrowser-launcher
Autoselecting /bin/bash as shell
Building quoted command line: 'torbrowser-launcher' 
Command name #torbrowser-launcher#
Found torbrowser-launcher profile in /usr/local/etc/firejail directory
Reading profile /usr/local/etc/firejail/torbrowser-launcher.profile
Error: cannot access profile file

Raw contents of https://github.com/netblue30/firejail/blob/master/etc/torbrowser-launcher.profile were cut/pasted, no file permissions changed. Tried removing the include /etc/firejail/disable-xdg.inc as suggested, same error. Running latest master from git.

<!-- gh-comment-id:441298320 --> @Zypherspace commented on GitHub (Nov 23, 2018): Same problem here as TNTBOMBOM ``` firejail --debug torbrowser-launcher Autoselecting /bin/bash as shell Building quoted command line: 'torbrowser-launcher' Command name #torbrowser-launcher# Found torbrowser-launcher profile in /usr/local/etc/firejail directory Reading profile /usr/local/etc/firejail/torbrowser-launcher.profile Error: cannot access profile file ``` Raw contents of [https://github.com/netblue30/firejail/blob/master/etc/torbrowser-launcher.profile](url) were cut/pasted, no file permissions changed. Tried removing the include /etc/firejail/disable-xdg.inc as suggested, same error. Running latest master from git.
gitea-mirror commented 2026-05-05 08:05:47 -06:00
Author
Owner
Copy link

@Vincent43 commented on GitHub (Nov 23, 2018):

What system you using?

<!-- gh-comment-id:441299143 --> @Vincent43 commented on GitHub (Nov 23, 2018): What system you using?
gitea-mirror commented 2026-05-05 08:05:47 -06:00
Author
Owner
Copy link

@Zypherspace commented on GitHub (Nov 24, 2018):

Fedora 29 Cinnamon. It is working on a fresh install of Fed 29 Plasma without any changes to profile.
I've reinstalled Tor-Browser. TB runs correctly outside Firejail.

I see some errors in terminal during TB launch:

$ firejail /usr/bin/torbrowser-launcher
Reading profile /usr/local/etc/firejail/torbrowser-launcher.profile
Reading profile /usr/local/etc/firejail/globals.local
Reading profile /usr/local/etc/firejail/disable-common.inc
Reading profile /usr/local/etc/firejail/disable-devel.inc
Reading profile /usr/local/etc/firejail/disable-interpreters.inc
Reading profile /usr/local/etc/firejail/disable-passwdmgr.inc
Reading profile /usr/local/etc/firejail/disable-programs.inc
Reading profile /usr/local/etc/firejail/whitelist-common.inc
Reading profile /usr/local/etc/firejail/whitelist-var-common.inc
Parent pid 28462, child pid 28463

Interface        MAC                IP               Mask             Status
lo                                  127.0.0.1        255.0.0.0        UP    
eth0-28462       9a:f1:78:a0:4c:91  192.168.50.247   255.255.255.0    UP    
Default gateway 192.168.50.1

Warning: skipping ca-certificates for private /etc
Warning fcopy: skipping /etc/crypto-policies/back-ends/openssh-server.config, cannot find inode
Private /etc installed in 33.96 ms
52 programs installed in 32.12 ms
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Blacklist violations are logged to syslog
Child process initialized in 1106.97 ms

(torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine",

(torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine",

(torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine",

(torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine",

(torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine",

(torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine",

(torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine",
Tor Browser Launcher
By Micah Lee, licensed under MIT
version 0.2.9
https://github.com/micahflee/torbrowser-launcher
Refreshing local keyring...
Keyring refreshed successfully...
  No key updates for key: EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
Launching './Browser/start-tor-browser --detach'...
`


```
<!-- gh-comment-id:441336968 --> @Zypherspace commented on GitHub (Nov 24, 2018): Fedora 29 Cinnamon. It is working on a fresh install of Fed 29 Plasma without any changes to profile. I've reinstalled Tor-Browser. TB runs correctly outside Firejail. I see some errors in terminal during TB launch: ```` $ firejail /usr/bin/torbrowser-launcher Reading profile /usr/local/etc/firejail/torbrowser-launcher.profile Reading profile /usr/local/etc/firejail/globals.local Reading profile /usr/local/etc/firejail/disable-common.inc Reading profile /usr/local/etc/firejail/disable-devel.inc Reading profile /usr/local/etc/firejail/disable-interpreters.inc Reading profile /usr/local/etc/firejail/disable-passwdmgr.inc Reading profile /usr/local/etc/firejail/disable-programs.inc Reading profile /usr/local/etc/firejail/whitelist-common.inc Reading profile /usr/local/etc/firejail/whitelist-var-common.inc Parent pid 28462, child pid 28463 Interface MAC IP Mask Status lo 127.0.0.1 255.0.0.0 UP eth0-28462 9a:f1:78:a0:4c:91 192.168.50.247 255.255.255.0 UP Default gateway 192.168.50.1 Warning: skipping ca-certificates for private /etc Warning fcopy: skipping /etc/crypto-policies/back-ends/openssh-server.config, cannot find inode Private /etc installed in 33.96 ms 52 programs installed in 32.12 ms Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Blacklist violations are logged to syslog Child process initialized in 1106.97 ms (torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine", (torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine", (torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine", (torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine", (torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine", (torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine", (torbrowser-launcher:76): Gtk-WARNING **: 02:01:11.697: Unable to locate theme engine in module_path: "murrine", Tor Browser Launcher By Micah Lee, licensed under MIT version 0.2.9 https://github.com/micahflee/torbrowser-launcher Refreshing local keyring... Keyring refreshed successfully... No key updates for key: EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 Launching './Browser/start-tor-browser --detach'... ` ```
gitea-mirror commented 2026-05-05 08:05:48 -06:00
Author
Owner
Copy link

@SkewedZeppelin commented on GitHub (Nov 24, 2018):

@Zypherspace please see https://github.com/netblue30/firejail/issues/2038#issuecomment-405096879

<!-- gh-comment-id:441337144 --> @SkewedZeppelin commented on GitHub (Nov 24, 2018): @Zypherspace please see https://github.com/netblue30/firejail/issues/2038#issuecomment-405096879
gitea-mirror commented 2026-05-05 08:05:48 -06:00
Author
Owner
Copy link

@Zypherspace commented on GitHub (Nov 29, 2018):

I tried the full scrub of firejail as detailed in #2038. I followed with a full recursive search and deleted any firejail remnants before reinstalling. Reinstalled with make rpms. Unfortunately I still see the Gah. Your tab just crashed. code on Tor-browser. Fedora has been updated several versions on the machine it's got a lot of ragtag symlinks, I'll reinstall a fresh release soon.

<!-- gh-comment-id:442695565 --> @Zypherspace commented on GitHub (Nov 29, 2018): I tried the full scrub of firejail as detailed in #2038. I followed with a full recursive search and deleted any firejail remnants before reinstalling. Reinstalled with make rpms. Unfortunately I still see the `Gah. Your tab just crashed.` code on Tor-browser. Fedora has been updated several versions on the machine it's got a lot of ragtag symlinks, I'll reinstall a fresh release soon.
gitea-mirror commented 2026-05-05 08:05:48 -06:00
Author
Owner
Copy link

@Futureknows commented on GitHub (Jan 11, 2019):

Commenting out seccomp fixed it for me.

<!-- gh-comment-id:453352885 --> @Futureknows commented on GitHub (Jan 11, 2019): Commenting out seccomp fixed it for me.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
serialize_remounts_v2
landlock_v4
landlock
release-0.9.64
release-0.9.62
gitlab_ci
LTSbase
fred_ctests
docs
0.9.80
0.9.80-rc1
0.9.78
0.9.76
0.9.76-rc4
0.9.76-rc3
0.9.76-rc2
0.9.76-rc1
0.9.74
landlock-split
0.9.72
0.9.72rc1
0.9.70
0.9.68
0.9.68rc1
0.9.66
0.9.66rc1
0.9.64.4
0.9.64.2
0.9.64
0.9.64rc1
0.9.62.4
0.9.62.2
0.9.62
0.9.56.2-LTS
0.9.60
0.9.60-rc1
0.9.58.2
0.9.58
0.9.58-rc1
0.9.56-LTS-release
0.9.56-LTS
0.9.56
0.9.56-rc1
0.9.54
0.9.54-rc2
0.9.54-rc1
0.9.52
0.9.38.12
0.9.50
0.9.50-rc1
0.9.48
0.9.46
0.9.46-rc1
0.9.44.10
0.9.44.8
0.9.44.6
0.9.38.10
0.9.44.4
0.9.38.8
0.9.44.2
0.9.44
0.9.44-rc1
0.9.38.4
0.9.42
0.9.42-rc2
0.9.38.2
0.9.42-rc1
disable-globalcfg
0.9.40
0.9.40-rc1
0.9.38
0.9.38-rc1
0.9.36
0.9.36-rc1
0.9.34
0.9.34-rc1
0.9.32
0.9.32-rc1
0.9.30
0.9.30-rc1
Labels
Clear labels   
LTS merge

   
LTS merge

   
bug

   
bug

   
converted-to-discussion

   
doc-todo

   
documentation

   
duplicate

   
enhancement

   
file-transfer

   
firecfg

   
firejail-in-firejail

   
firetools

   
graphics

   
help wanted

   
information_old

   
installation

   
invalid

   
modif

   
moved

   
needinfo

   
networking

   
notabug

   
notourbug

   
old-version

   
overlayfs

   
packaging

   
profile-request

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question_old

   
removal

   
runtime-permissions

   
sandbox-ipc

   
security

   
stale

   
wiki

   
wiki

   
wontfix

   
wordpress

   
workaround
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1428
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?